Ekatraa Vendor Privacy Policy

1. Scope

This policy explains how Ekatraa Assistance Private Limited (Ekatraa, we, our, us) collects, uses, stores, shares, and protects data when vendors use the Ekatraa Vendor App and related services.

2. Data We Collect

• Account and contact data: name, mobile number, email, business details, and address.
• Identity/KYC data: Aadhaar verification details, KYC status, and uploaded KYC images.
• Business operations data: listings, bookings/orders, quotations, invoices, and settlements.
• Financial/tax data: bank details, UPI ID, GST number, PAN number.
• Technical/security data: device/app metadata, IP, logs, authentication/session data, and push tokens.
• Permission-based data: foreground location and camera/photo access when vendors actively use related features.

3. Why We Use Data

• Create and manage vendor accounts and business profiles.
• Verify identity and prevent fraud or abuse.
• Enable bookings, quotations, invoices, settlements, and support.
• Meet legal, tax, audit, and regulatory obligations.
• Maintain platform security and reliability.

4. Legal Basis

Processing is based on vendor consent, contractual necessity to provide platform services, and compliance with legal obligations.

5. How We Share Data

• With customers: limited business-facing information required for service fulfillment.
• With processors/service providers: hosting, communication, settlement, analytics, and support vendors acting on our instructions.
• With authorities/regulators/law-enforcement when required by law or legal process.

We do not sell vendor personal data.

6. Permissions and Device Access

• Camera access is used only for vendor-initiated image capture for KYC and profile/service media uploads.
• Foreground location access is used only for vendor-initiated location setup in onboarding/profile flows.
• The app does not require background location for core operation.

7. Data Retention

• Data is retained while the vendor account is active and for reasonable continuity periods.
• Specific records may be retained longer where required for tax, audit, compliance, fraud prevention, dispute handling, or financial reconciliation.
• After required periods, data is deleted, anonymized, or securely archived as permitted by law.

8. Security

We use safeguards such as encryption in transit, access controls, authentication controls, and secure storage practices. No method is perfectly secure, but we continuously improve our controls.

9. Vendor Rights

Subject to applicable law, vendors may request access, correction, deletion, or clarification on processing of their data.

10. Account Closure and Deletion Requests

Vendors may request account closure/deletion by writing to grievance@ekatraa.in. We may retain certain records where required for legal, compliance, dispute, fraud-prevention, or financial reconciliation purposes.

11. Children

The Ekatraa Vendor App is not intended for children.

12. Policy Updates

We may update this Privacy Policy from time to time. Material updates will be reflected with the latest effective/updated date.

13. Contact

Email: grievance@ekatraa.in
Address: 522/3199, Behera Sahi, Nayapalli, Bhubaneswar, Odisha - 751012